Privacy Policy

1. Introduction & Scope

QuiEco (https://www.quieco.com) is a platform powered by PhoneHai Pvt Ltd ("QuiEco", "we", "us", "our"). Through our website and mobile app (the "Platform"), you can compare scrap rates, book a doorstep pickup with verified scrap dealers, and get paid securely.

This policy explains what personal data we collect, why we need it, who sees it, and what control you have over it. It applies to sellers, dealers on the Partner Hub, and visitors to the Platform.

Under the Digital Personal Data Protection Act, 2023 ("DPDP Act"), PhoneHai Pvt Ltd is the Data Fiduciary and you are the Data Principal. We handle your data in line with the DPDP Act, the Information Technology Act, 2000 ("IT Act") and related rules.

This policy is available in English and Hindi. You may also ask us for it in any other language listed in the Eighth Schedule to the Constitution of India.

2. Information We Collect

We ask only for details that a scrap sale genuinely needs.

Information you provide

Account and identity details: name, mobile number, and email (optional).
Pickup details: address, nearby landmark, PIN code, and preferred time slot.
Support communications: queries, complaints, feedback and ratings.

Scrap transaction data

Type of scrap (paper, metal, plastic or other), estimated and final weight, the per-kg rate applied, and the amount paid.
Pickup photos uploaded by you or the dealer. These serve as proof of what was collected if a dispute arises. Please keep people and the inside of your home out of the frame.

Payment data

Bank account details or UPI ID, used only to pay you, along with records of payouts (amount, date, mode, reference number).

Card details are handled by PCI-DSS compliant payment gateways and are not stored on QuiEco servers. We never ask for or collect your UPI PIN, card PIN, card security code or net-banking password.

Dealer and Partner Hub data

Business name, authorised person's name and contact details, address, service areas, working hours, and the scrap rates the dealer sets.
GST, PAN, ID/address proof and bank details for verification and settlements.
Customer ratings and complaints related to the dealer.

Location data

With your permission, we read your device location, or use the address you enter, to find the nearest verified dealer and route the pickup. We do not track your location in the background.

You can withdraw location permission at any time in your phone settings. Features that depend on it, such as automatic dealer matching, may then stop working.

Device and usage data

IP address, device ID, device model, operating system, app version, screens visited, and crash logs used to diagnose and fix faults.

Cookies and similar technologies

We use cookies, SDKs and similar tools to keep you signed in, remember your settings, keep the Platform secure, and understand how it is used. This includes analytics tools such as Google Analytics, managed through Google Tag Manager.

You can block or delete cookies in your browser, and manage permissions in your phone's privacy settings. Some features may not work properly if you do.

Providing the details marked as required is necessary to use the service. Without them, we may not be able to complete your registration, pickup or payout.

3. Why We Use Your Personal Data

To register you and verify your identity.
To schedule pickups, show scrap rates and match you with a verified dealer.
To calculate and process your payout.
To resolve disputes using pickup photos and transaction records.
To verify and onboard dealers.
To send OTPs, booking confirmations, reminders, payout alerts and policy updates.
To provide customer support.
To prevent fraud, misuse and unauthorised access.
To improve the Platform through analytics and bug fixes.
To comply with Indian tax, accounting and legal requirements.
Marketing: we send offers or promotional messages only if you opt in, and you can opt out at any time.

We process your personal data based on your consent, which is free, specific, informed and given through a clear, affirmative action such as an unchecked checkbox or an explicit "I agree" button. We never pre-tick consent. Before or when we ask for your consent, we show you what personal data we collect and why. Where the DPDP Act permits (Section 7), we may also process data for certain legitimate uses, such as complying with the law or a court order, or for the purpose for which you voluntarily gave us the data.

You can withdraw consent at any time, as easily as you gave it, through app settings or by contacting us. Please note:

Withdrawal does not affect processing done before it.
If you withdraw consent for essential data (such as your address for pickups or bank/UPI details for payouts), we will no longer be able to provide those services.
We may still keep records that the law requires us to retain.

After you withdraw consent, we will stop processing your data within a reasonable time and ask our service providers to do the same, unless the law requires or allows the processing to continue.

We share your information only when a task requires it:

Dealers: your name, phone number, pickup address, scrap type and time slot are shared only with the dealer assigned to your pickup, solely for that pickup. Dealers must keep this information confidential and may not use it for any other purpose.
Payment providers: banks, UPI providers and payment gateways, to complete your payout.
Service providers: hosting, SMS/communication, maps, analytics and support vendors, who process data only on our instructions, under a valid contract and confidentiality obligations.
Legal disclosure: where required by law, such as under Section 69 of the IT Act, a court order, or a lawful request from a government authority. We share only what is legally required.
Business transfers: if PhoneHai Pvt Ltd is merged or acquired, your data may pass to the successor, who must protect it under this policy or one at least as protective.
Outside India: if any data is processed outside India, we will do so only as permitted by the DPDP Act and government notifications.

We do not sell your personal data to advertisers or data brokers. The Platform may link to third-party websites we do not control; their practices are governed by their own privacy policies.

6. Data Retention

How long we keep each type of personal data
Data	Retention
Account and profile data	Until you delete your account
Financial and transaction data	Up to 8 years, as required under Income Tax and GST laws
Pickup photos and dispute records	3 to 7 years, for dispute resolution
Dealer verification records	Duration of the dealer relationship, plus the period required by law
Device and diagnostic logs	Only as long as needed, then deleted or anonymised

We erase personal data when you withdraw consent, or when the purpose it was collected for is no longer being served, unless the law requires us to retain it. Where the law requires, we will notify you before erasing your data.

We may keep data longer where needed to prevent fraud or to establish or defend legal claims. After that, data is deleted or anonymised, and anonymised data may be used for analytics.

7. Security Measures

We use reasonable safeguards, as required under the DPDP Act and IT Act, including:

TLS 1.3 encryption in transit and AES-256 encryption at rest.
Role-based access controls, so only authorised staff can access personal data, under confidentiality obligations.
Dealer verification, including physical verification, which adds a layer of safety for the data you share with dealers.
Regular monitoring for vulnerabilities.

Your part: keep your login details safe and never share your OTP, UPI PIN, card PIN or banking password with anyone. QuiEco staff will never ask for them. If you notice unusual activity on your account, contact us immediately through our official support channels.

No method of internet transmission or storage is completely secure, so we cannot guarantee absolute security. If a personal data breach affects you, we will notify you and the Data Protection Board of India as required by law.

8. Your Rights as a Data Principal

You have the right to:

Access a summary of the personal data we process and who we have shared it with.
Correct inaccurate or incomplete data and update outdated data.
Erase your personal data and delete your account, unless we must retain it by law.
Withdraw consent at any time.
Nominate another person to exercise your rights if you die or become incapacitated.
Raise a grievance with us.

To use these rights, contact us using the details below. We may need to verify your identity first.

Grievance Officer

Name: Mr. Vijay Kumar
Designation: Director
Email: vijay@phonehai.com
Phone: +91 78766 67777
Hours: Mon-Sat, 10:00 AM to 7:00 PM IST

Please raise your grievance with us first. We will acknowledge it promptly and respond to it within 90 days of receiving it. If it is not resolved to your satisfaction, you may make a complaint to the Data Protection Board of India through the process published by the Board.

Your responsibilities: please give us accurate information, do not impersonate another person, do not withhold material information when giving ID or address proof, and do not file false or frivolous grievances or complaints.

9. Account Deletion

You can ask to close your account from within the app or through our support team.

Complete or cancel any open pickups and clear pending settlements first. Dealers must also settle any dues before their Partner Hub account is closed.
After your request, we will delete or anonymise your personal data, except records the law requires us to keep for a fixed period (see Section 6).
Closing your account means you lose your order history and account features.

10. Children's Privacy

QuiEco is not intended for users under 18. Selling scrap requires valid ID and the legal and financial capacity to enter into a transaction and receive payouts. We ask you to confirm that you are 18 or older when you register. We do not knowingly collect children's data, and we do not track or monitor children or show them targeted advertising. If a minor has given us personal data, a parent or guardian can contact us and we will delete it.

11. Changes to This Policy

We may update this policy from time to time. We will post the updated version with a new "Last Updated" date and notify you of material changes through the Platform or by message. Where the law requires, we will seek your fresh consent. If you continue to use QuiEco after an update, the revised policy applies to you, subject to your right to withdraw consent.

12. Contact Information

PhoneHai Pvt Ltd (operating QuiEco)

Address: PhoneHai Private Limited, Near Government Senior Secondary School, Hasanpur, District Jhajjar, Haryana – 124103
Email: info@quieco.com
Phone: +91 78766 67777
Website: https://www.quieco.com